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CLAIMS 

1. A data processing device (1) adapted to be installed 
in a data processing server (2) adapted to receive 
primary data and to transmit said primary data after 

5 application of dedicated processing based on primary 

rules by control means (5) , which device is characterized 
in that it comprises i) a first table (Tl) storing sets 
of at least one primary rule, called "primary metarules", 
in a parameterizable form and in corresponding 

10 relationship to primary identifiers and ii) management 

means (8) adapted to be coupled to said control means (5) 
and, on receipt of auxiliary data representing operating 
parameters delivered by said control means (5) after 
reception by the server (2) of secondary data, to select 

15 at least one of the primary identifiers in the first 

table (Tl) and associate said auxiliary data therewith so 
as to define said dedicated processes. 

2. A device according to claim 1, characterized in that 
20 it comprises a second table (T2) accessible to said 

management means (8) in which are stored secondary 
identifiers in each corresponding relationship to at 
least one selected primary identifier associated with 
auxi 1 iary data . 

25 

3. A device according to claim 2, characterized in that 
said management means (8) are adapted, on receipt of said 
auxiliary data, to determine if selected primary 
identifiers corresponding thereto is present in the 

3 0 secondary data (T2) , so as to associate therewith new 
auxiliary data intended to adapt said dedicated 
processes . 

4. A device according to claim 2, characterized in that 
35 certain selected primary metarules in the second table 

(T2) are grouped into secondary metarules represented by 
secondary identifiers . 
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5. A device according to claim 1, characterized in that 
said management means (8) i) comprise a multiplicity of 
management submodules each adapted to manage the 
association of auxiliary data with at least one primary 

5 or secondary metarule and ii) are adapted, on receipt of 
said auxiliary data, to determine which of said 
management submodules corresponds thereto. 

6. A device according to claim 2, characterized in that 
10 said management means (8) are adapted, on receipt of said 

auxiliary data communicated by the server (2), to add, 
delete or modify primary or secondary metarules or 
auxiliary data in the second table (T2) associated with 
said primary or secondary metarules. 

15 

7. A device according to claim 1, characterized in that 
said management means (8) and said tables (Tl, T2 ) are 
part of a metafirewall adapted to manage a firewall 
equipping said server (2) . 

20 

8. A firewall characterized in that it comprises a device 
(1) according to any one of claims 1 to 7 . 

9. A data processing method consisting in applying 

25 dedicated processes based on primary rules to primary 

data received by a data processing server (2) so that the 
received primary data is processed before being 
transmitted by said server, which method is characterized 
in that it comprises a preliminary step in which i) there 

30 are stored in a first table (Tl) sets of at least one 
primary rule, called "primary metarules", in a 
parameterizable form and in corresponding relationship to 
primary identifiers and ii) on receipt of auxiliary data 
representing operating parameters delivered by the server 

35 (2) after the receipt of secondary data, at least one of 
the primary identifiers in the first table (Tl) is 
selected and said auxiliary data is associated with said 
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primary identifier so as to define said dedicated 
processes . 

10. A method according to claim 9, characterized in that, 
5 during the preliminary step, secondary identifiers each 
in corresponding relationship to at least one selected 
primary identifier associated with auxiliary data are ^ 
stored in a second table (T2) . 

10 11. A method according to claim 10, characterized in 

that, on receipt of the auxiliary data, it is determined 
if selected primary identifiers that correspond to it are 
present in the second table (T2) , so as to associate 
therewith new auxiliary data adapted to adapt said 

15 dedicated processes. 

12. A method according to claim 10, characterized in that 
certain primary metarules in the second table (T2) are 
grouped into secondary metarules represented by secondary 

20 identifiers. 

13. A method according to claim 9, characterized in that 
there are executed in parallel i) the selection of the 
primary or secondary metarules in the first table (Tl) 

25 and ii) the modification of the auxiliary data in the 
second table (T2) associated with the secondary 
identifier representing the selected primary or secondary 
metarules. 

3 0 14 . A method according to claim 9, characterized in that, 
on receipt of complementary data communicated by said 
server (2) , primary or secondary metarules are added to, 
deleted from or modified in the second table (T2) . 



